Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: 2ebSFTxyng3REZ6AuHEneS6itB4DXUmB3WZA4QKNQn4=
Subject key identifier: B5:4A:CE:4F:B9:0D:73:BD:46:9C:ED:EC:6A:79:58:B0:C7:70:4A:BB
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 0197B70ED5890FC84CC43913844616629D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0AF0
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: cuHGg1AiEG0fjIwRH9OdK/ON3boz3+UKHyBk1aujoe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d5:89:0f:c8:4c:c4:39:13:84:46:16:62:9d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=b54ace4fb90d73bd469cedec6a7958b0c7704abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:0e:91:6d:fb:43:88:b7:45:e9:96:27:bd:
d2:57:3d:bd:f2:e3:ce:67:b4:86:9d:17:5d:33:a3:
ab:3f:bf:be:ac:f1:93:dd:d9:ac:c2:50:55:27:e8:
af:2c:37:49:0c:e6:b5:09:89:52:5a:6f:85:5e:85:
6f:27:64:07:58:52:c5:57:7b:0f:e1:73:f7:ae:79:
b3:13:45:8e:aa:cf:84:4e:a9:fc:98:62:40:cc:fc:
24:65:11:36:7b:4a:42:75:22:ca:88:0a:c0:56:07:
67:78:a6:c7:82:f9:2a:f5:ef:93:b6:f0:2f:4b:66:
dd:d6:32:26:6a:a7:d9:9b:91:ee:28:d8:0d:91:7f:
75:f9:34:c1:88:e8:b8:c9:c1:e7:ea:0b:cb:21:10:
8d:b6:f1:9a:45:62:f7:96:f5:ca:cd:74:d6:d7:74:
a1:2a:42:55:ba:90:f3:cd:9d:cb:ee:6e:58:ef:d2:
21:62:b8:d4:78:93:38:fd:91:e4:c5:11:b7:57:26:
6d:c4:3b:2e:64:5b:93:9c:5a:d2:da:06:71:02:ea:
19:2c:be:74:06:2d:67:46:d0:95:0f:42:d3:67:7a:
b6:6f:8c:14:5b:b2:d4:35:89:7f:f3:9d:74:6f:a7:
2c:a7:6a:28:2f:79:6e:13:ff:79:d2:17:20:15:e4:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4A:CE:4F:B9:0D:73:BD:46:9C:ED:EC:6A:79:58:B0:C7:70:4A:BB
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:2f:64:82:70:55:95:3f:c7:fb:e5:2b:e2:2f:1a:6d:6e:
4a:dd:12:97:90:7f:f4:37:4c:4a:29:8f:c8:07:97:e8:40:8b:
96:94:3e:8b:32:7d:64:82:96:af:5d:db:da:e5:cb:75:81:21:
ce:02:8c:7f:a9:5b:81:f5:ae:bd:27:17:22:c7:a4:0c:2e:f1:
89:47:a4:78:60:d3:03:92:35:6d:8d:73:56:e4:6d:7d:72:93:
53:40:43:89:d1:c0:e9:e0:1c:53:d4:51:8d:92:4d:83:a2:4d:
09:13:03:a1:f0:fc:7c:66:6e:5a:a7:6a:99:a9:56:5b:bf:41:
15:d9:55:63:9b:49:09:8a:11:8f:86:f6:df:ff:93:cb:a1:e8:
0e:14:9c:05:c0:78:5a:7c:e5:d6:3e:db:31:5d:ee:04:6c:ef:
38:39:21:85:a2:b7:f4:a5:4a:ce:11:34:44:bf:ac:c0:19:c8:
4d:6c:62:80:eb:1d:14:f8:a3:8e:8e:ff:27:76:9d:24:b9:cb:
3f:ea:97:aa:c6:a1:3f:47:7d:66:8f:78:3c:e1:bb:94:9b:7d:
8b:29:7b:ff:8f:4e:9b:cc:ab:9b:ce:62:51:03:4d:69:83:4d:
e0:de:cc:9f:1c:b6:39:f3:4e:0f:59:12:7b:e1:5a:a7:49:a7:
80:b3:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:31 2025 by rpki-client